Firetruck

CVE-2019-1129

KEV · Ransomware
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
WindowsMicrosoft / Windows10 Version 1703 for 32-bit Systemsaffected
WindowsMicrosoft / Windows10 Version 1703 for x64-based Systemsaffected
WindowsMicrosoft / Windows10 Version 1709 for 32-bit Systemsaffected
WindowsMicrosoft / Windows10 Version 1709 for ARM64-based Systemsaffected
WindowsMicrosoft / Windows10 Version 1709 for x64-based Systemsaffected
WindowsMicrosoft / Windows10 Version 1803 for 32-bit Systemsaffected
WindowsMicrosoft / Windows10 Version 1803 for ARM64-based Systemsaffected
WindowsMicrosoft / Windows10 Version 1803 for x64-based Systemsaffected
WindowsMicrosoft / Windows10 Version 1809 for 32-bit Systemsaffected
WindowsMicrosoft / Windows10 Version 1809 for ARM64-based Systemsaffected
WindowsMicrosoft / Windows10 Version 1809 for x64-based Systemsaffected
Windows 10 Version 1903 for 32-bit SystemsMicrosoft / Windows 10 Version 1903 for 32-bit Systemsunspecifiedaffected
Windows 10 Version 1903 for ARM64-based SystemsMicrosoft / Windows 10 Version 1903 for ARM64-based Systemsunspecifiedaffected
Windows 10 Version 1903 for x64-based SystemsMicrosoft / Windows 10 Version 1903 for x64-based Systemsunspecifiedaffected
Windows ServerMicrosoft / Windows Server2019affected
Windows ServerMicrosoft / Windows Server2019 (Core installation)affected
Windows ServerMicrosoft / Windows Serverversion 1803 (Core Installation)affected
Windows Server, version 1903 (Server Core installation)Microsoft / Windows Server, version 1903 (Server Core installation)unspecifiedaffected